Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: CgSYFBdpYOtzm30iQ3fHJLjaKMIrXGrYNt5MkDhhoh4=
Subject key identifier: 41:6B:B3:86:59:94:70:42:2C:78:47:2B:C5:45:0E:84:C6:4F:18:28
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019D9B50962E595D383075A53539737FD821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0BF2
Signing time: Fri 17 Apr 2026 12:00:42 +0000
Manifest this update: Fri 17 Apr 2026 12:00:42 +0000
Manifest next update: Sat 18 Apr 2026 12:00:42 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: giYFOd14Jw06omb+ETTMtllnop/4ayXOn6mLaqpX/H8=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:96:2e:59:5d:38:30:75:a5:35:39:73:7f:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Apr 17 12:00:42 2026 GMT
Not After : Apr 18 12:00:42 2026 GMT
Subject: CN=416bb386599470422c78472bc5450e84c64f1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:50:5a:0d:51:18:fd:7b:70:0f:e1:23:f5:
ac:2f:bd:57:8f:a4:34:54:f7:54:fc:49:bc:40:43:
f9:3c:ec:c8:85:a4:80:5a:a2:61:eb:ad:6f:8d:ee:
a8:85:a3:e0:26:93:f1:f8:dd:58:47:54:f5:84:11:
73:fb:df:ad:96:81:24:6a:1f:08:4f:0e:cd:c6:be:
ec:81:4c:b5:36:96:46:f0:b7:b1:13:f7:d4:6a:50:
1f:0f:11:66:03:f6:c5:18:3d:2d:1f:84:8d:4a:a1:
79:5e:3d:b0:9d:94:4e:2a:ea:0d:4f:7d:c9:82:e6:
3c:16:8e:50:9b:08:aa:3d:0f:4d:89:49:c5:f4:01:
3a:54:cd:bf:7d:3d:ca:c4:01:bd:c9:1e:28:f5:bb:
44:16:e8:a6:cb:d4:d7:c1:1a:36:aa:bc:0c:c4:39:
89:1b:f9:73:7d:43:7c:6d:10:a2:7b:c8:7b:29:53:
d3:68:6b:98:d3:9a:da:88:e7:d7:31:f9:bc:8e:78:
7d:b8:c0:1a:b5:38:8d:40:c9:77:20:ea:54:d8:f6:
e3:7c:f5:de:94:fd:52:76:33:f5:e4:39:d3:5f:94:
a3:17:20:1b:7f:1b:ee:64:33:1a:6b:6a:5e:97:68:
e4:23:c5:7e:dd:60:9a:de:1b:32:8a:49:5c:cf:df:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:B3:86:59:94:70:42:2C:78:47:2B:C5:45:0E:84:C6:4F:18:28
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:86:ab:7f:71:0e:b6:7e:f2:cf:32:b9:e8:c4:27:be:4f:
d5:88:f2:37:d4:18:df:84:8f:e1:7f:8a:8e:ba:f1:0d:d4:ce:
d2:ec:2f:fd:8a:55:c4:44:9f:58:d3:62:d4:a7:62:b6:ca:3e:
fe:20:c6:37:c7:e6:76:6f:4a:00:81:89:a9:b4:8b:1d:79:42:
bc:f3:6e:3c:05:99:63:f0:08:6c:37:6f:de:40:bd:b0:34:cf:
d2:b5:b1:f4:ec:c7:75:77:3d:a9:2f:02:17:f7:0f:f0:71:7f:
0c:a4:39:4b:19:02:43:ae:5c:05:9f:a3:11:ee:dd:7e:fb:d3:
57:a3:66:90:4c:9e:57:7a:92:d5:41:dd:f8:22:1e:6f:94:82:
af:74:85:4f:10:b3:d3:83:de:7d:ab:45:ee:7c:bb:c4:43:da:
ba:a4:6b:10:b4:5c:87:47:c1:c1:86:7e:1c:e5:9d:38:62:bd:
cf:32:f4:12:f8:52:97:9d:1a:ef:c8:2b:3b:53:bc:a8:8b:4d:
38:0f:ee:40:74:ec:34:b6:72:83:03:83:c9:0e:20:ab:b1:f9:
36:bd:d4:01:0e:b1:46:bd:97:ed:50:54:b7:4d:92:06:dd:c0:
c8:9a:a7:56:d9:97:36:32:27:0c:1c:26:64:70:e0:a9:bd:2b:
c5:4d:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:31 2026 by rpki-client